Prototype Pollution in doc-path

2021-05-1019:17:25

Google

osv.dev

0.006 Low

EPSS

Percentile

77.9%

This affects the package doc-path before 2.1.2.

CPENameOperatorVersion
doc-pathlt2.1.2

CPE	Name	Operator	Version
	doc-path	lt	2.1.2

References

github.com/mrodrig/doc-path/blob/stable/src/path.js%23L54

github.com/mrodrig/doc-path/commit/3e2bb168cf303bffcd7fae5f8d05e5300c1541c7

nvd.nist.gov/vuln/detail/CVE-2020-7772

snyk.io/vuln/SNYK-JS-DOCPATH-1011952

0.006 Low

EPSS

Percentile

77.9%

Related for OSV:GHSA-GM8G-XHH8-RMWR